Specific purposes of the collection, processing or use of dataHSR is an innovative and expanding company in the hydraulics industry with branches throughout the whole of Germany. The core business of HSR is the servicing of high-pressure connections for technical systems in industry and construction.

The company collects, processes and uses personal data solely for performing or preparing contracts, complying with statutory obligations or with the consent of the data subject.

Legal basisThe legal basis for performing the designated procedures is defined in the GDPR and, where applicable, in the respective national data protection laws (in Germany the BDSG [Federal Data protection Act - FDPA]). Particular reference should be made here to Articles 4 to 7 GDPR. Art. 4 GDPR defines the terms used and refers to Recitals 26-37.

Where processing is necessary on the basis of Art. 6 (1) (f) GDPR, this is done solely for concluding or performing contracts – except where such interests are overridden by the legitimate interests of the data subject – taking into account all data protection requirements. When weighing up the interests of the data subjects and the contracting parties, strict standards in favour of the data subject are applied at all times.

Potential recipients of transmitted dataThe potential recipients of transmitted personal data are• public authorities, provided that a statutory obligation exists,• service providers and other business partners, insofar as the transmission of data is necessary for fulfilling the respective purpose and is permitted or required on grounds of a statutory provision, or the data subject has given his/her consent.

There are no provisions for any further disclosure of personal data and this shall, as such, not take place.

Intent to transfer data to third countriesWhere it is necessary to transfer data to third countries, this is done solely for concluding or performing contracts – except where such interests are overridden by the legitimate interests of the data subject – taking into account all data protection requirements. Where there is any intent to transfer personal data to a third country or an international organisation, this is done on the basis of Art. 45 GDPR (Transfers on the basis of an adequacy decision). However, should data be transferred pursuant to Art. 46 or Art. 47 or Art. 49 (1) second subparagraph, please note that suitable safeguards or binding in-house data protection regulations are in place or, respectively, when weighing up the interests of the data subjects and the contracting parties, strict standards in favour of the data subject are applied at all times.

Standard limitation periods for the erasure of dataPersonal data is erased in accordance with the relevant statutory or contractual regulations on data erasure, taking into account any statutory or contractual retention obligations.

Personal data that is not subject to any statutory or contractual retention or erasure obligations is erased as soon as such is no longer required to fulfil the specific purpose.

Right of access, rectification and erasureEach data subject has the right to request from the controller access to the personal data relating to him/her, the right to rectification, erasure or restricted processing of the data, the right to object to the processing, and the right to data portability.

Right to withdraw consentWhere processing is performed on the basis of Art. 6 (1) (a) or Art. 9 (2) (a), each data subject has the right to withdraw his/her consent at any time, without affecting the lawfulness of processing on the basis of consent prior to the withdrawal thereof.

Right to objectEach data subject has the right to lodge a complaint with a supervisory authority.

Right to informationEach data subject has the right to be informed whether the provision of personal data is a statutory or contractual requirement, or a requirement necessary to conclude a contract, and whether the data subject is obligated to provide the personal data, and what the consequences of failure to provide such data might be.

Automated decision-making including profilingWe use automated decision-making including profiling. The logic involved, and the significance and envisaged consequences of such processing, are defined as follows. Profiling is any form of automated processing of personal data that consists of using this personal data to evaluate certain personal aspects relating to a natural person using algorithms. An automated individual decision occurs where the decision is based solely on algorithms without being additionally checked by a person. Within the company, this is performed on the basis of Art. 22 GDPR and, where necessary, the data subject may assert his/her rights under Art. 22 (1) GDPR.

PURPOSE OF DATA PROCESSINGWhen you use our website, data is stored for organisational and technical reasons. The access data includes the IP address, the date and time of the request, the time zone difference to Greenwich Mean Time (GMT), the content of the request (i.e. name of the specifically accessed web page), the access status/HTTP status code, the volume of data transmitted, the referrer URL (previously visited page), the browser type and version, the operating system and its interface, the language and version of the browser software, and notification that the data was successfully retrieved. We evaluate this technical data anonymously and only for statistical purposes to enable us to continuously optimise our website and make our services more appealing. This data is stored separately from other personal information on secure systems and is not used to identify particular individuals.

COOKIESWe use cookies on our website. These small text files are sent by our server to your computer and stored there. They help to display our website correctly and make it easier for you to navigate it. Cookies collect information about your IP address, your browser, your operating system and your internet connection. We do not combine this information with personal data nor do we disclose it to third parties. In no event do we use cookies to upload malware or spyware onto your computer. You can also use our website without cookies, but in this case our website may not be displayed correctly and some of the functions may not work properly. If you want to disable the cookies, you can do so by adjusting specific settings in your browser accordingly. Please use your browser’s help function to make the relevant changes. You can object to the use of cookies for internet audience measurement and advertising purposes on the opt-out page of the Network Advertising Initiative (https://optout.networkadvertising.org) and also on the US website (https://www.aboutads.info/choices) or the European website (https://www.youronlinechoices.com/uk/your-ad-choices).

COLLECTION OF ACCESS DATAThe collection of certain data is technically essential for us to be able to deliver and display content through our website. When you access our website, these so-called server log files are recorded by us or the web space provider. These log files do not allow any conclusions to be drawn about your identity. The information includes the name of the website, the file, the current date, the volume of data, the browser and version, the operating system used, the domain name of your internet provider, the referrer URL (the page from which you were forwarded to our website) and the respective IP address. We use this data to display and deliver our content and for statistical purposes. The information helps us to provide and continuously optimise our website. We also reserve the right to examine the aforementioned data retroactively if we suspect that our website is being used illegally.

CONTENT AND SERVICES OF THIRD PARTIESOur website may include content and services of other providers that complement our range. Examples of such offers are Google Maps, YouTube videos or third-party graphics. Access to these third-party services routinely requires the transmission of your IP address. This enables these providers to obtain knowledge of and store your user IP address. We make every effort to only involve third-party providers who use the IP address for the sole purpose of delivering content. However, we have no influence on which third-party providers store the IP address. Storing this data can, for example, serve statistical purposes. Should we become aware that third-party providers are storing data, we shall inform our users of this fact without delay. In this regard, please also read the specific privacy policies of the individual third-party providers and service providers whose services we use on our website. These are also specified in this privacy policy.

Processing when using individual services through the websiteVarious services can be accessed through our website for which we collect personal data from you, if you decide to use such services. Information on the types of data processed, the purpose of and the legal basis for processing, when the data is erased, and to whom your data is transmitted, where necessary, is available below: